Tools · SPBoucher
Menu

ngrok

by ngrok, Inc. · API service

Hosted ingress service that exposes local servers through public URLs via an agent or SDK, with Traffic Policy rules, API gateway features and reserved domains

ProprietaryFreemiumPaidUsage-basedEnterpriseCloudLocal
Visit official site Compare

Checked Nov 2, 2026

Overview

ngrok is a proprietary ingress-as-a-service platform from ngrok, Inc. A small agent (or an embedded SDK for Go, Rust, Python and JavaScript) opens an outbound connection to ngrok's cloud, which then publishes a public HTTPS or TCP endpoint and forwards requests back to the local process. It began as the standard way to demo a laptop server or receive webhooks during development and has grown into an API gateway product with Traffic Policy rules for authentication, rate limiting, header rewriting and request routing, plus an AI gateway for routing calls to model providers.

Accounts on the free tier get random or limited static URLs; paid plans add reserved domains, custom branded domains, more endpoints and team features. Because the edge is operated by ngrok, no inbound firewall rules or TLS setup are needed on the local side.

The agent is closed source (the public repositories cover SDKs and examples), all traffic passes through ngrok's infrastructure, and free endpoints carry interstitial warnings and limits, so long-running production exposure is normally done on a paid plan or with a self-controlled gateway.

Capabilities

  • Public HTTPS and TCP endpoints for local services through an outbound agent
  • Agent SDKs for Go, Rust, Python and JavaScript
  • Traffic Policy rules for auth, rate limiting, header and routing manipulation
  • Reserved and custom domains, OAuth and IP restrictions
  • Request inspection and replay in a web dashboard
  • API and Terraform provider for managing endpoints

Typical workflows

  1. Receive webhooks on a development machine
  2. Share a work-in-progress site with a public URL
  3. Front an internal API with ngrok's gateway policies

Strengths

  • Working public URL in one command
  • No open ports or certificate handling locally
  • Gateway features without deploying a proxy

Limitations

  • Closed-source agent and hosted-only edge
  • All traffic transits a third party
  • Free-tier endpoints carry limits and interstitial pages

Prerequisites

  • ngrok account and auth token
  • Agent binary or SDK in the application

Who it is for

  • Developers testing webhooks and demos
  • Teams exposing APIs without managing ingress

Alternatives & comparison

Cloudflare Tunnel offers a similar outbound-agent model on a Cloudflare-managed domain, with the tunnel daemon open source. Tailscale Funnel publishes a tailnet service publicly without a separate account for the edge. A self-hosted Caddy on a VPS reproduces the public endpoint under full operator control but requires a server and DNS.

  • Caddy

    Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

    Open sourceOpen source
  • Cloudflare Tunnel

    Outbound-only connector (cloudflared) that publishes local web services and private networks through Cloudflare's edge without opening inbound ports

    MixedFreemium
  • Tailscale

    WireGuard-based mesh overlay network with a hosted coordination service, identity-provider login, access policies, MagicDNS and features such as Tailscale SSH, Serve and Funnel

    MixedFreemium
Compare ngrok with its alternatives →

Sources & verification

Primary sources consulted for this record. Claims are tied to the fields each source supports; the automated link checker re-verifies every URL on a schedule.

  • Official documentation
    Get Started with ngrok

    https://ngrok.com/docs/start

    Supports: capabilities, interfaces, languages

    checked Nov 1, 2026
  • Official site
    ngrok

    https://ngrok.com/

    Supports: name, summary

    checked Nov 1, 2026
  • Pricing page
    ngrok Pricing

    https://ngrok.com/pricing

    Supports: pricing_model

    checked Nov 1, 2026
Confidence
High
Reviewed
Nov 1, 2026
Links
Broken · Nov 2, 2026

Spotted an error?

Broken link, outdated license, wrong category, or a tool that no longer exists? Tell us; reports are reviewed by the editor.

WireGuard

WireGuard project (Jason A. Donenfeld) · Tunneling & remote access

In-depth entry

Minimal, high-speed VPN protocol and implementation built on modern cryptography, included in the Linux kernel and available on macOS, iOS, Windows, Android and BSD

GPL-2.0-onlyOpen sourceFreeLocalSelf-hostedNov 2, 2026

OpenSSH

OpenBSD Project · Tunneling & remote access

Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling

SSH-OpenSSHOpen sourceFreeLocalSelf-hostedNov 2, 2026